Skip to main content
1

Open API keys in the dashboard

Sign in at dashboard.sendbaze.com and go to API keys. Owners, admins and developers can create keys.
2

Choose a mode

  • Test keys start with sk_test_. They run every validation, return real-looking ids and never send, never touch your allowance and never use credits. Use them while you wire up your code and in CI.
  • Live keys start with sk_live_. They send real email and SMS. Email goes from a verified domain, or, for your first 100 emails to your own addresses, from the shared test address.
3

Choose scopes

A key only does what its scopes allow. Give a server that only sends email emails:send and nothing else.
4

Copy the key once

The full key is shown one time. Sendbaze stores only a hash, so a lost key must be replaced. Put it in an environment variable rather than in code:
.env

​
Use it

Send the key as a bearer token on every request.
Never ship a live key in a browser bundle or a mobile app. Call Sendbaze from your server, or from a route handler in frameworks such as Next.js, so the key stays private.

​
Revoke a key

Revoke a key from the same page. Requests with it fail with 401 unauthorized from the next call. The Last used column shows whether anything still relies on a key before you revoke it.